dsh-deepseek-vision

dsh-deepseek-vision

A DSH plugin that gives text-only DeepSeek models image recognition.

It registers the deepseek_vision tool, which calls the local deepseek-vision-cli (browser automation driving chat.deepseek.com's vision mode) and returns the image description as text to the model.

Tool

• deepseek_vision(image, prompt?)
• image: absolute path to a local image (PNG/JPG/WebP/GIF; HEIC is not supported)
• prompt: optional question or analysis request for the image

Installation

dsh plugin --profile web add D:/Dsh/tools/dsh-deepseek-vision

Or use the release tarball:

dsh plugin --profile web add dsh-deepseek-vision-0.0.1.tgz

First login

DeepSeek web vision requires a web login session. The current web UI uses password / third-party login, so the recommended way is the manual login helper:

py -3.13 D:\Dsh\tools\deepseek-vision-cli\dsv_manual_login.py

It opens an Edge window to the DeepSeek login page. After you log in manually, the helper saves the token to D:\Dsh\.cache\dsv_token.

Token login (alternative)

If you already have a DeepSeek web session in your normal browser, you can copy the token directly:

1. Open https://chat.deepseek.com and log in.
2. Press F12 → Application → Local Storage → https://chat.deepseek.com.
3. Find userToken, copy its value field.
4. Save it to D:\Dsh\.cache\dsv_token (no quotes, no newline):

[IO.File]::WriteAllText(
  'D:\Dsh\.cache\dsv_token',
  'PASTE_TOKEN_HERE',
  (New-Object Text.UTF8Encoding($false))
)

The token is only stored locally in D:\Dsh\.cache\dsv_token; it is never committed to this repository.

Configuration

Default configuration for this machine:

• pythonCommand: py
• pythonVersion: -3.13
• dsvScript: D:/Dsh/tools/deepseek-vision-cli/dsv.py
• timeoutMs: 180000
• maxOutputChars: 20000

These can be overridden in a profile patch.

Security notes

• The tool only accepts local file paths and invokes the external CLI through

the DSH subprocess service with an argv array, never through a shell.

• Images are sent to DeepSeek's web endpoint; this is not local recognition.
• This relies on non-official web interfaces and may be subject to risk control.

Use a secondary account and keep usage low-frequency.

• Static security audit reports critical for spawning a subprocess; this is

inherent to wrapping an external CLI. The code has been manually reviewed: it only runs the fixed dsv.py, with no command concatenation or extra exfiltration.

License

MIT